This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WZj-IalFFmh6Z69GUY-F6xM1-8k.roa File: WZj-IalFFmh6Z69GUY-F6xM1-8k.roa (raw, json) Hash identifier: T+x3T1hIv5R96dHFUYGmjwwoF3m4sKE7gRXIHjSMPmk= Subject key identifier: 59:98:FE:21:A9:45:16:68:7A:67:AF:46:51:8F:85:EB:13:35:FB:C9 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019ADEA1F97FF7CE59BF3945927D393B7326 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WZj-IalFFmh6Z69GUY-F6xM1-8k.roa Signing time: Tue 02 Dec 2025 10:35:48 +0000 ROA not before: Tue 02 Dec 2025 10:35:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199527 IP address blocks: 80.81.39.0/24 maxlen: 24 83.223.157.0/24 maxlen: 24 91.190.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:a1:f9:7f:f7:ce:59:bf:39:45:92:7d:39:3b:73:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Dec 2 10:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5998fe21a94516687a67af46518f85eb1335fbc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:5a:13:35:96:42:45:36:e4:28:cc:4c:b5: 9b:ce:22:72:f3:9c:b9:b6:93:e4:1a:85:7a:0b:ff: d6:ab:cf:71:e7:e4:8c:3e:87:e7:24:07:15:01:7f: b5:87:94:65:45:88:e9:96:a9:08:58:1e:05:9c:4a: ed:01:b7:47:4c:31:a7:8c:55:bf:98:76:21:d7:48: a4:6e:6f:b8:15:20:26:aa:cc:bc:cc:45:04:68:79: 9d:67:1a:25:8a:2c:7c:67:24:4a:b3:d3:5e:28:b4: 46:b2:ac:a6:e9:a1:3d:10:bb:c8:bd:2c:31:bf:af: 5c:25:29:8a:c0:f2:ef:a9:15:06:b5:55:db:7e:f0: 6b:86:a3:d9:17:b0:9f:d3:f9:eb:68:1c:a1:ec:52: 58:d3:1f:f4:3f:ae:af:b0:26:9b:ad:3a:65:a4:0c: 53:0a:b0:be:fb:8f:e1:91:34:4c:09:7b:4b:27:0b: be:ce:a1:d7:08:60:7a:41:f4:79:23:12:a8:c6:02: 7f:7e:2f:b7:00:36:f6:67:75:3e:f9:bc:32:79:f5: 0c:0d:2a:33:ae:51:4b:c5:6c:f6:bc:48:22:5e:45: 01:46:60:0c:e5:01:95:93:a5:e7:59:9f:1f:a5:2d: 67:fd:8a:4f:b8:a5:93:20:67:9f:ef:80:c1:e4:13: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:98:FE:21:A9:45:16:68:7A:67:AF:46:51:8F:85:EB:13:35:FB:C9 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WZj-IalFFmh6Z69GUY-F6xM1-8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.39.0/24 83.223.157.0/24 91.190.61.0/24 Signature Algorithm: sha256WithRSAEncryption 15:a4:f3:48:18:68:52:23:e5:95:91:94:2f:04:bb:32:19:aa: fa:3e:3d:7f:e1:4b:32:9a:89:b3:d8:50:ad:ff:ad:30:13:96: b6:15:d7:d5:b2:00:cb:86:d3:b6:02:42:81:28:97:8b:32:6a: 2b:85:97:3d:6e:df:70:a0:d9:63:1e:5b:a4:7d:a8:82:e5:03: 1d:d1:3d:6b:71:0d:2e:93:7e:40:07:4a:b2:e2:1d:3f:f4:66: 56:8b:d6:71:a7:10:5f:2b:59:a0:7e:9a:52:88:8b:9a:f7:e5: 83:86:bd:8f:04:60:32:f2:9a:6d:e4:01:ff:99:93:4a:7c:af: 83:ae:7d:16:a8:01:40:7e:2c:52:da:c2:c5:79:e0:bc:e3:d9: 49:98:6c:5d:ec:16:e5:ee:09:1b:62:5d:3c:91:1e:85:e0:f3: cc:b0:79:16:47:bd:e7:b9:06:66:c8:50:46:cb:40:a2:d4:b3: ad:78:59:ad:d2:e1:92:a4:f1:a3:c0:af:99:33:ca:ca:78:0a: bf:f6:d9:0d:9e:d2:2a:43:97:ac:82:b8:8e:72:2e:8f:5d:90: 02:e7:6d:16:e9:03:db:a7:77:78:ab:8d:3e:f7:6b:ec:00:b6: e1:36:7a:a1:e5:de:bb:e9:53:85:a3:23:54:79:82:5c:6f:b8: 15:83:d6:f4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZreofl/985ZvzlFkn05O3MmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjUxMjAyMTAzNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTk4ZmUyMWE5NDUxNjY4N2E2N2FmNDY1MThmODVlYjEzMzVmYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomZaEzWWQkU25CjMTLWbziJy85y5 tpPkGoV6C//Wq89x5+SMPofnJAcVAX+1h5RlRYjplqkIWB4FnErtAbdHTDGnjFW/ mHYh10ikbm+4FSAmqsy8zEUEaHmdZxoliix8ZyRKs9NeKLRGsqym6aE9ELvIvSwx v69cJSmKwPLvqRUGtVXbfvBrhqPZF7Cf0/nraByh7FJY0x/0P66vsCabrTplpAxT CrC++4/hkTRMCXtLJwu+zqHXCGB6QfR5IxKoxgJ/fi+3ADb2Z3U++bwyefUMDSoz rlFLxWz2vEgiXkUBRmAM5QGVk6XnWZ8fpS1n/YpPuKWTIGef74DB5BOKYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFmY/iGpRRZoemevRlGPhesTNfvJMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvV1pqLUlhbEZGbWg2WjY5R1VZLUY2eE0xLThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUFEnAwQA U9+dAwQAW749MA0GCSqGSIb3DQEBCwUAA4IBAQAVpPNIGGhSI+WVkZQvBLsyGar6 Pj1/4Usymomz2FCt/60wE5a2FdfVsgDLhtO2AkKBKJeLMmorhZc9bt9woNljHluk faiC5QMd0T1rcQ0uk35AB0qy4h0/9GZWi9ZxpxBfK1mgfppSiIua9+WDhr2PBGAy 8ppt5AH/mZNKfK+Drn0WqAFAfixS2sLFeeC849lJmGxd7Bbl7gkbYl08kR6F4PPM sHkWR73nuQZmyFBGy0Ci1LOteFmt0uGSpPGjwK+ZM8rKeAq/9tkNntIqQ5esgriO ci6PXZAC520W6QPbp3d4q40+92vsALbhNnqh5d676VOFoyNUeYJcb7gVg9b0 -----END CERTIFICATE-----Generated at Fri Dec 5 13:18:00 2025 by rpki-client